CVE-2009-3479

Drupal - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in Bibliography (Biblio) 5.x before 5.x-1.17 and 6.x before 6.x-1.6, a module for Drupal, allows remote attackers, with "create content displayed by the Bibliography module" permissions, to inject arbitrary web script or HTML via a title.

References (5)

Scores

EPSS 0.0024
EPSS Percentile 47.1%

Classification

CWE
CWE-79
Status published

Affected Products (41)

drupal/drupal
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
ron_jerome/bibliography
... and 26 more

Timeline

Published Sep 30, 2009
Tracked Since Feb 18, 2026